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WF CLAIM: 

5 1. A method for multiplying an elliptic curve point Q(x,y) by a scalar to provide a point 
kQ, the method comprising the steps of: 

a) selecting an elliptic curve over a finite field F such that there exists an 

endomorphism y where iy(Q) =>-Q for all points Q(x,y) on the elliptic curve, and 
X is an integer, 

10 b) establishing a representation of said scalar k as a combination of components kj 

f ;= said integer A 

?M c ) combining said representation and said point Q to form a composite representation 

m of a multiple corresponding to kQ and 

d) computing a value corresponding to said point kQ from said composite 
* s 15 representation of kQ. 

q 2. A method according to claim 1 wherein each of said components kj is shorter than 

jfj said scalar k. 

IU 3. a method according to claim 1 wherein said components kj are initially selected and 

§1 subsequently combined to provide said scalar k. 

20 4. A method according to claim 1 wherein said representation is of the form 

k. = jP k { X mod n where n is the number of points on the elliptic curve. 

5. A method according to claim 4 wherein said representation is of the form ko + k|. 

6. A method according to claim 1 wherein said scalar k has a predetermined value and 
said components k. 

25 7. A method according to claim 3 wherein said value of said multiple kQ is calculated 
using simultaneous multiple addition. 
8. A method according to claim 7 wherein grouped terms Gi utilized in said 
simultaneous multiple addition are precomputed. 
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9. A method according to claim 6 wherein said components kj are obtained by obtaining 
short basis vectors (iio, uO of the field F, designating a vector v as (k,0), converting v 
from a standard, orthonomal basis to the (iio,ui) basis, to obtain fractions f Q f\ 
representative of the vector v, applying said fractions to k to obtain a vector z, 

5 calculating an 

efficient equivalent v ' to the vector v and using components of the vector v in the 
composite representation of kQ. 

10. A method of generating in an elliptic curve cryptosystem a key pair having a integer k 
10 providing a private key and a public key kQ, where Q is a point on the curve, 

a) selecting an elliptic curve over a finite field F such that there exists an 
endomorphism y where iy(Q) = XQ for all points Q (x,y) on the elliptic curve, 
X is an integer, 

b) establishing a representation of said key k as a combination of components k, 
1 5 and said integer X, 

c) combining said representation and said point Q to form a composite 
representation of a multiple corresponding to the public key kQ and 

d) computing a value corresponding to said key kQ from said composite 
representation of kQ. 

20 11. A method according to claim 10 including a method according to any one of claims 2 
to 9. 
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